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Abstract 

In this paper we solve the satisfiability problem for a quantifier-free fragment of set 
theory involving the powersct and the singleton operators and a finiteness predicate, 
besides the basic Boolean set operators of union, intersection, and difference. The more 
restricted fragment obtained by dropping the finiteness predicate has been shown to 
have a solvable satisfiability problem in a previous paper, by establishing for it a small 
model property. To deal with the finiteness predicate we have formulated and proved a 
small model witness property for our fragment of set theory, namely a property which 
asserts that any satisfiable formula of our fragment has a model admitting a "small" 
representation. 

Key vifords Satisfiability decision problem, satisfaction algorithm. Zcrmelo-Fraenkcl 
set theory. 
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1 Introduction 

Since the late seventies, the decision problem in set theory has been investigated very 
actively, as part of a project aiming at the mechanical formalization of mathematics using 
a proof verifier based on the set-theoretic formalism |OS02l ICOS*03"| IOCP*06] . 

The large body of decidability results gave rise to the field of Computable Set Theory; 
the reader is referred to |CFQ891 ICOPOlj for a very comprehensive account. 

Using specialized techniques, several fragments of set theory were shown to have a 
solvable satisfiability decision problem. But it soon became clear that in order to combine 
such decidable fragments into more comprehensive ones, more sofisticated methods were 
needed, which would make the growing mass of technicalities involved more manageable. 

Such methods began to emerge in [CanOlj and gained perspicuity and uniformity of 
approach in |CU971 ICQU02j : they rely on a careful analysis of the formation process 
of families of pairwise disjoint sets. This analysis brought into light decidable conditions 
which are necessary and sufficient to ensure satisfiability within a collection of set-theoretic 
formulae denoted MLSSP (viz., "Multi-Level Syllogistic with Singleton and Powerset op- 
erators"). Specifically, MLSSP is the quantifier-free language of set theory, consisting of 
all propositional combinations of literals involving the set operators of union, intersection, 
difference, powerset, finite enumerations, and the set relators of equality, membership, and 
inclusion. 

Let us recall that the satisfiability problem for MLSSP was shown to be decidable by 
singling out a computable function c which associates a positive integer with every formula 
of MLSSP so that the following "small model property" holds: any satisfiable MLSSP- 
formula <1> can be satisfied by a set assignment mapping the variables of ^ into sets of 
finite rank bounded by c($). Decidability then follows readily, in view of the facts that 
finitely many such assignments exist, that their collection can be effectively generated, 
and, additionally, for every such assignment one can effectively test whether or not it 
satisfies As an immediate by-product, one has that any satisfiable MLSSP-formula is 
satisfied by an assignment of finite sets (of bounded rank) to the variables. 

A natural question then arises: how can one tackle the satisfiability problem regarding 
a collection of formulae which extends MLSSP and comprises formulae satisfiable only by 
means of assignments some of whose images are infinite sets? 

The present paper contributes to answering this question by providing a positive so- 
lution to the satisfiability problem for the language MLSSPF which extends MLSSP by a 
predicate Finite{x) asserting that its argument x has finite cardinality. Obviously, since 
the negated predicate -^Finite{x) expresses that x is an infinite set, MLSSPF cannot en- 
joy the above-described small model property; but, on the other hand, we will show that 
MLSSPF enjoys a less demanding property, called "small model witness property" (cf. 
|Urs05j ). asserting the existence of a computable function c defined over the formulae of 
MLSSPF and such that any satisfiable MLSSPF- formula $ has a "witness satisfying as- 
signment" of finite rank bounded by c(<l>). Though a witness satisfying assignment for 
a formula ^ is not required to directly satisfy it represents a satisfying assignment 
for ^ through a "pumping mechanism" which will be illustrated at length in the paper. 
Additionally, since one can test algorithmically whether a given assignment of finite rank 
is a witness satisfying assignment for a formula decidability of the satisfiability problem 
for MLSSPF follows. 

To achieve these results we will rely on the notion of formative process introduced 
in |COU02j and [CQPOlj . which enables one to characterize any given collection of sets 
by means of a (transfinite) sequence of construction steps. By suitable manipulations. 
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namely through the pumping technique mentioned above, a formative process for a witness 
satisfying assignment can be turned into a formative process for a(n infinite) satisfying 
assignment. 

We expect that similar techniques will demonstrate very useful in the investigation 
of the satisfiability problem for various fragments of set theory involving operators such 
as the unary union |J and the Cartesian product x, since these can be used to express 
satisfiable formulae such as 

xC|^xAx7^0 and xxxCxAx7^0, 

which admit only infinite satisfying assignments. 

The paper is organized as follows. In Section [2l after reviewing some basic set-theoretic 
notions and terminology, we give a precise definition of the language MLSSPF of our 
interest and briefly discuss its satisfiability problem. Then in Section [3] we present and 
extend the notion of P-boards and the technique of formative processes. We also introduce 
the notion of pumping path and prove a related pumping theorem which is then used in the 
subsequent Section [4] as a basic tool for showing how to produce a satisfying assignment 
from a witness satisfying assignment. Section [5] contains some closing remarks and hints 
at possible directions of future research. Finally, an appendix containing the proof of a 
technical result used in Section S] concludes the paper. 

2 The satisfiability problem for MLSSPF 

Before giving the precise definition of the language MLSSPF and discussing its satisfiability 
problem, we review some basic set-theoretic concepts and terminology. 

2.1 Basic notions 

Our considerations will refer to the von Neumann's cumulative hierarchy V, often re- 
garded as the intended model of Zermelo-Fraenkel set theory, also referred to as "{ sets }" 
throughout the paper, which is defined in the following recursive manner: 

Vo = 0, 

Va+l = nVa), 

Va = U,<aV,, 
V = U.eOnV^ 

(where y{S) denotes the powerset of S and On is the class of all ordinal numbers — recall 
that a LIMIT ordinal is an ordinal which differs from and from any SUCCESSOR ordinal, 
of the form a + 1). Then we can readily define a rank function rk on V by putting 

rk (5) =Def min{ a G On \ S £ Va+i } , 

for each S £ V (see |Jec78j for further details). 

A set S is TRANSITIVE if U ^ 5", i.e., every member of a member of S belongs to S. 
The TRANSITIVE CLOSURE TrCI(S') of a set S is the minimal transitive set containing S, 
i.e., 

TrCI(5) =D,f f]{T £V\SCT AT is transitive} . 



for each ordinal a, 

for each limit ordinal A, 
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A set S such that TrCI(5) is finite is said to be hereditarily finite. By m we denote 
the rank of the collection of all hereditarily finite sets. It can be shown that to is the 
smallest infinite (limit) ordinal. 

We also recall that a partition S is a collection of pairwise disjoint nonnull sets, called 
BLOCKS of E. The union |J S of a partition T, is the domain of S. If the domain of a 
partition S is transitive, then we will say that S is a transitive partition. 

For the sake of completeness, we briefly review the notations which will be used in the 
rest of the paper. We denote: by , the set of all functions / from Y into X; by f[S], 
the multi-image {Y I (3 z € S)Y = f{z)}; hy Ro S, the map composition of R and S. 
To describe a function / = {{X,Yx) I X € Z}, we will interchangeably use the notation 

f = {Yx}x£Z notation X i-^ Yx {X G Z); moreover, when Z is an ordinal and 

accordingly / is a Z-sequence, we will make use of the notation / = (^Of )x<z • 

2.2 MLSSPF: assignments, models, and its satisfiability problem 

The syntax of the quantifier-free language MLSSPF is defined as follows. The symbols of 
MLSSPF are: 

• infinitely many variables x,y,z, . . .; 

• the constant symbol 0; 

• the set operators • U •, • n •, • \ •, {•,...,•}, and ?*(•); 

• the set predicates • ^ •,• = •,• g and Finite{-). 

The set of MLSSPF-terms is the smallest collection satisfying the following conditions: 

• all variables and the constant are MLSSPF-terms; 

• if s and t are MLSSPF-terms, so are sUt, s Dt, s\t, and J'(s); 

• if si, . . . , s„ are MLSSPF-terms, so is {si, . . . , s„}. 

MLSSPF-ATOMS have the form s t, s = t, s (z t, and Finite{s), where s,t are 
MLSSPF-terms. 

MLSSPF-FORMULAE are propositional combinations of MLSSPF-atoms. MLSSPF-lit- 
ERALS are MLSSPF-atoms and their negations. 

The semantics of MLSSPF is defined in the obvious way. A set assignment M over 
a collection V of variables is any map from V into the universe V of all sets (in symbols, 
M G or M G {sets}^). The rank of a set assignment M over a collection V of variables 
is given by 

rk (M) =j3<,f max^gy rk {Mv) . 

If V is the collection of variables occurring in an MLSSPF-formula then a set assignment 
M over V is said to satisfy <1> if the sentence <I>*^ obtained by substituting in $ each 
variable x by its interpretation Mx is true, where the operators and predicates in ^ 
are interpreted in the standard way. We will call any set assignment which satisfies a 
given MLSSPF-formula $ a model for When $ has a model, we will say that $ is 
SATISFIABLE. 

The SATISFIABILITY PROBLEM for MLSSPF is the problem of establishing whether any 
given MLSSPF-formula is satisfiable. 
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By using a normalization procedure of the kind described in |CF0891 pp. 96-99], the 
satisfiability problem for MLSSPF can easily be reduced to the satisfiability problem for 
NORMALIZED CONJUNCTIONS of MLSSPF, namely conjunctions of literals of the following 
types: 

X = y, X ^ y, x = 0, x = yU z, x = y D z, 

x = y\z, x C y, X 2 y, xey, x^y, 

x = y{y), X = {yi,...,yH}, Fimte{y), -^Fimte{y). 

By dropping from MLSSPF the literals involving the finiteness predicate, one obtains 
the theory MLSSP, whose decision problem has been solved in [Can91j and later revisited 
in [CQU02) with the approach relying on formative processes. 



2.3 Decision tests and Venn partitions 

The decidability of MLSSP has been shown in |Can91l ICOU02j by proving that MLSSP 
enjoys a small model property. This amounts to proving that there exists a com- 
putable function c defined over the collection of MLSSP-formulae such that any satisfiable 
MLSSP-formula $ has a model of rank bounded by c($). Therefore, to test the satisfia- 
bility of an MLSSP-formula ^ involving the variables V$, one could execute the following 
procedure: 

1. for each set assignment M over V$, whose rank is limited by c{^) do 

2. if M satisfies ^ then 

3. return is satisfiable" 

4. return "<I> is unsatisfiable" 

The effectiveness of the above procedure follows immediately from the fact that there 
are only finitely many set assignments over V$ of finite bounded rank (and these can be 
effectively generated) and, additionally, it can be effectively verified whether any such set 
assignment satisfies the formula <I>. 

In the case of MLSSPF, we will not be able to prove a small model property of the kind 
seen for MLSSP, since there are satisfiable MLSSPF- formulae which admit only models of 
infinite rank (e.g., ^Finite{x)). Thus, we will only prove a weaker property for MLSSPF, 
the SMALL MODEL WITNESS PROPERTY, which still yields the decidability of the satisfiabil- 
ity problem for MLSSPF. To be more specific, we will show that there exists a computable 
function c', defined over the the collection of MLSSPF- formulae, such that for any satisfi- 
able MLSSPF- formula ^ there exists a (witness) set assignment M over the variables V$ 
of having finite rank bounded by c'($), such that, by means of a "pumping process" to 
be defined later, M can be transformed into a set assignment M' which satisfies <I>. Since, 
as will be shown later, one can effectively test whether a set assignment over V$ of finite 
rank can be pumped into a model for the decidability of the satisfiability problem for 
MLSSPF wiU follow. 

For the purpose of studying the satisfiability problem for MLSSPF, it is helpful to 
associate with any set assignment M over V its Venn partition Sjv/, defined by 

^M=u.i{r\Mv\ \J Mv: UQV [//0}\{0}, 

veu vev\u 

i.e., the coarsest partition of Ui)ev induced by the sets M v, for v in V. 
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It is also convenient to define the map 9m : V TCEm), where 
^Aiiv) = {o" € \ a Q M v} , for v in V, 

so that M V = [J holds, for each v in V. 

A basic technique to prove the decidability result of our interest consists in transforming 
a given model of an MLSSPF- formula $ into a witness set assignment for $ of bounded 
rank. Therefore, we need to find appropriate ways to manipulate set assignments. 

A set assignment M over V can be manipulated through its associated Venn partition 
Sa/ as follows. Let S' be any partition of the same cardinality as J^m and let P : Sjv/ T,' 
be a bijection. Then we define a set assignment M' over V by putting 

M'v=^^,\Jp['^Miv)], ioTvinV. 

Plainly, the Venn partition of M' is just T,'. 

Next, let us assume that M satisfies an MLSSPF- normalized conjunction ^. 

Under which conditions on T,' and /3 can we infer that the formula ^ is also satisfied 
by M' ? 

If $ involves only literals of the form 

x = y, x^y, X = 0, x = yUz, 

X = y n z, X = y \ z, xCy, x <^ y, 

then it easily follows that M' satisfies <1>, without requiring any particular condition on S' 
and p. 

If, in addition to literals of type ([T]), the conjunction <^ involves also literals of type 

X € y, x^y, x = ?{y), x = {yi, . . . , y//}, (2) 

then in order for M' to satisfy $ we require that the following three conditions hold (a 
proof of this fact can be found in |COU02l Lemma 10.1]): 

Condition 1: T,' ^-simulates T,m via /?, i.e., (J P[X] e U P[Y] if and only ii{jX e\jY, 
for X,Y C Sm; 

Condition 2: S' 'J>- simulates Sm via /?, i.e., [] I3[X] = y(U P[Y]), if = J'dJ^'), for 
X,Y <zt.m; 

Condition 3: S' L-simulates Sm via (3, i.e.,\Jp[X] = {\J (3[Yi] , . . . ,\J(3[Yl]}, if = 
{U Yi , . . . , y Y]^}, foic X,Yi, . . . ,Yl C Sjv/, where L is an upper bound for the value 
H in each literal of type x = {yi, . . . , y/^} in <I>. 

If we further assume that besides literals of type ([T]) and ([2]) the formula $ contains 
also literals of the form Finite{y) and ^Finite{y), then M' satisfies <I> if, in addition to 
Conditions 1-3, also the following condition holds: 

Condition 4: P{cr) is finite if and only if a if finite, for a G T,m- 

In fact, it is convenient to include among the Venn regions associated with M also an 
"outer" disjoint region £m, defined in such a way that T,m U {£m} is a transitive partition 
whose domain is the transitive closure of the set {M v : v G V}, namely 



£M = TrC\{{Mv\veV})\\Jj:M. 
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In the study of transitive partitions, we wih make use of V-hoards and formative pro- 
cesses, conceptual tools already introduced in [COPOH Chapter 9] and treated in greater 
depth, but in slightly different terms, in |COU02) . In the next section we review the defi- 
nitions and basic facts related to "P-boards and formative processes, suitably extended for 
the purpose of properly dealing with infinite blocks. 

3 Syllogistic boards and formative processes 
3.1 Basics on syllogistic boards 

We consider a finite set V, whose elements we will call places and whose subsets we will 
call NODES. We assume that Vf\y[V) = 0, so that no node is a place, and vice versa. We 
will use these places and nodes as the vertices of a directed bipartite graph Q oi a special 
kind, which we will call a "P-board. The edges issuing from each place q are, mandatorily, 
all pairs q, B such that q (z B V. The remaining edges of Q must lead from nodes to 
places; hence, Q is fully characterized by the function 

associating with each node A the set of all places t such that {A, t) is an edge of Q. The 
elements of T(A) are called the targets of A. We will usually represent Q simply by T. 

Places and nodes of a "P-board are meant to represent the blocks a, and the subsets 
r (or, quite often, their unionsets Ijr), of a transitive partition S, respectively. Thus, if 
we indicate by q^*^ the block which corresponds to the place q, and by B^*'^ the set which 
corresponds to the node B, our understanding is that 

• q(') / 0, for ah g G P; 

• q^*^ Cip^'^ = when q ^ p, for all q,p € V; 

• B^*^ is the sub-partition {q^*^ : q G B} of the partition p(*^ = S, for all B (IV; 

• every element of any element of a block in V^'^ , belongs to a block in P^*^ . 

Moreover, the intended meaning oft G T{A) is that ny*(yl(*)) / 0, where the following 
shorthand notation is used: 

T*{X) =Drf {t;CUX| (VnGX)nn-y/0}. 

More precisely, not only t^'^ n 'J'*{A'^'^) / must hold when t G T{A), but also s^'^ n 
= when s G P \ T{A). 

Definition 1 A transitive partition S is said to comply with Q via q i-^ q^*^ , where Q is 
a P-board, q ^ q^'^ belongs to and T{A) = {qeV\ 'J'*{A^'^) n q^'^ / 0}, if the latter 
function satisfies all the constraints associated with Q, as indicated above (in particular, 
this requires q i— > q^'^ to be injective). □ 

Any such board is said to be induced by T, (for short, a T,-board). We denote a transitive 
S-board by a couple (S, Q), where S is a transitive partition and Q is the induced P-board. 

For the purposes of this paper, some additional structure must be superimposed on 
P-boards: 
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Definition 2 A T'-board Q = (T, T, Q) is said to be colored when it has 

• a designated set T of places, 

• a designated set Q of nodes, such that D G Q holds whenever D Q B £ Q 
(in short, U ^[Q] ^ Q ), and 

• a target function T. 

The places in are said to be red, the ones in P \ ^ are said to be green; the nodes in Q 
are called y-nodes. A node is red if all places in it are red, and green otherwise; a list of 
vertices is green if all vertices lying on it are green. □ 

Assume that belongs to MLSSP, and let A4 £ { sets j"^* be a set-valued assignment 
defined on the collection of variables in We denote by the Venn partition of 
the set A^[A:<i,], and by the function ^ '^i^x^)'^'^ such that M{v) = [JQm{v) 
holds for every v in X^. 

Remark 1 Observe that any formula with variables of a language resulting from 
an extension of Multi Level Syllogistic can be modified, without affecting its satisfiability, 
in such a way any model M. generates a transitive T,x^ |Can91t pp. 195-196]. Because of 
that, from now on we shall assume that T,x^ is transitive, for any model of a formula 
$ with variables X^. 

The intended meaning of r G is that |r(*)| < ^q; B e Q means that C 
\JV^'\ To see that the latter constraint belongs to MLSSP, note that an alternative way 
of stating it is as J'(|J B^'^) C |J V^*^ (this, globally, needs to be made explicit only for the 
inclusion- maximal nodes B in Q). It is, in fact, obvious that y*(B(')) C follows 
from T(U5^'^) C Up('), because y*{B^'^) C y{\jB^'^); conversely, if 5 is a O^-node, and 
the condition ?*(£>(•)) C yp(*) is satisfied by every IP-node D (and hence it holds when 
D C B), then 

y (y S (•) ) = U [{D^'^ : D C B}]C[j'J>* [{£)(•) : D eQ}]C[j . 
Likewise, the constraints t^*^ D 7'*{A^'^) ^ associated with edges {A,t) (and also con- 
straints of the form s^*^ D 'J'*{A^'^) = 0) can be written in terms of the customary operator 
T, because 

y*(A(')) = y(U AW) \ U {y(U(^ \ U})^'^) --qeA}. 
Observe, thirdly, that the transitivity condition [j [j P^*'^ C |J is reducible to the 
MLSSP fragment of the set-theoretic language, too, because it can be restated as |J P^'^ C 
T(UP(')). 

In conclusion, we may view a colored board Q as being the representation of a con- 
junction {p = ipg of constraints each of which either belongs to MLSSP or has the form 
Finite{r). Here we are momentarily regarding each place q as the name of an unknown 
set; when the unknowns are replaced by concrete sets q^'^ within (p, the overall substi- 
tution must satisfy ip, and the sets q^*^ will then collectively form a partition S actually 
complying with (p. Let us now obtain ^ = by adding to (p all constraints ^Finite{g) 
with g ^ V \ T . By investigating how we can get a solution to (p out of a solution to 
(if possible), we will shed light on the conditions for the satisfiability of any formula of 
the quantifier-free language MLSSP extended with the Finite relator; and, ultimately, we 
will come to an algorithm which is able to test any formula of this extended language for 
satisfiability. 

When affirmative literals of the form Finitely), with v in X^, are also included in $, 
the $];t'$-board can be colored naturally, by putting 
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(a) T = U{^A^(^) I ^ literal of either the form v = {wi, . . . , wh} 

or the form Finite{v) occurs in $}; 

(b) Q is the minimal collection of nodes such that 

— 9_A/i(ti) € Q for all literals of the form u = 'J'{w) in and 

This win be called the canonical board of the assignment M for the MLSSPF- 

FORMULA 

3.2 Formative processes and basic events 

We will now discuss a technique by which one can find a transitive partition 

complying with a given "P-board by 

• constructing a ^-sequence of partitions which is a formative process in the sense 
specified by Def. [3] below, by then 

• ascertaining that every edge {A, t) of the P-board has been activated along the 
process (in a sense to be clarified below), and by then 

• taking as the last partition of the sequence. 
Definition 3 Let be partitions such that 

• every block a S S has a block a' € S' for which cr C a'; 

• o"o, <7i ^ T" implies (Tq = ai when cjq, cti € S and r G S'. 

Then we say that S' frames S. 
When S' frames S, and moreover 

S / S', and |J S' \ |J S C ^(r) for some PCS, 

then the ordered pair S, S' is called an action. 

A (formative) process is a sequence (S^)^^^ of partitions, where ^ can be any 
ordinal and, for every ordinal i' < 

• = if 1/ = 0; 

• Ti^, is an action; 

• Sa frames S^,, and IJ Sa ^ UU{^7 • 7 ^ -^li fo'^ every limit ordinal A such that 

For all ^ ^ and r S Sg, we will designate by t^^^ the unique set such that 

r^f^^ = the (T G such that o" C r, if any exists, else 0. 

A process (S^)^^^ is said to be greedy if, for all v < ^ and F C Sjy, the following 
holds: 

r (F) n (U \ U S,) / implies (t*(F) \ |J n |J = 0. 
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If we take, along with a colored P-board T,T,Q, a bijection q t— >■ g^*) from the 
places V to the final partition of a formative process, and if moreover complies 
with T,T,Q, we get what we will caU a colored P-process: namely the quintuple 
(S^)^^^, (•),T,JF, Q. Then, for all ^ ^, < ^, p G 'P, i? C "P, we will designate by 

pip-) ^ Bi^\ B^'), Ay the unique sets such that 
pip) = (pW)(^^ 

^ ^qip) : q^B}, and S(') = {gW : g G S}; 
Ay = the set ^ C P for which [j S^+i \ U C 

We will call A^ the u-th move of the process. □ 



As an easy illustration of how one can reason about processes, let us prove the following: 



Lemma 1 In a process (S^)^^^, each S^j frames T,y, and U £ U f'^^ u < fj,. 

Proof. Arguing by contradiction, suppose that the statement is false, and let /i be the 
least ordinal such that, for some v < ^, either C (J does not hold or Sj^ is not 

framed by S^. 

Trivially, since u < fi, we have n ^ 0; moreover cannot be a successor ordinal 
/i = 7 + 1, else would frame S^, and would frame Sjy by the assumed minimality 
of /i, and hence, transitively, would frame S^, a contradiction. 

But /i cannot be a limit ordinal either. In fact, if /i is a limit ordinal and we consider 
any ordinal i' < fi, then frames Ti^; moreover, since z/ + 1 ^ ^u, we have |J Sj^ C 

Relative to a formative process (S^)^^^, we can identify certain events: these, roughly 
speaking, are ordinals ly where something important is about to happen. Examples of 
events are, for any T C Eg and a G S^: 

Edge-activation move: a i/ < ^ such that cr(''+i) n T*{r) / and a'^"') n T*(r) = 0; 
Grand move: a < ^ such that U ^ G |J Sj^+i \ |J Sjy. 

Subtler events, which will be discussed later, create conditions that enable expansion of 
the block associated with a green place into an infinite block. 



3.3 Historical profile of an infinite block 

Let the triple T, J^, Q represent a colored P-board: what guarantee do we have that a 
colored process (S^)^^^, {•),T,J^, Q exists? A priori, according to our definitions, none; 
as a matter of fact, should some place have no afferent edges, that is, should there be 
some s (z V such that s ^ 1'{A) for any A V, then no move A^ would ever be allowed 
to bring elements into s^'''~^^\ and consequently s^*^ could not be a block in a partition. 

The situation is quite different if the colored P-board with which we start is induced 
by a transitive partition S, because then one can prove (cf. |COU02l p. 176]) the following 

Theorem 1 (Trace theorem) IfT,J^,Qisa colored T,-board induced by a finite transi- 
tive partition S, then a greedy colored process (S^)^^^, is, T, Q exists which ends with 
= S and /las 1^1 ^ |US|. " ■ 
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As we showed in |COU02[ p. 180 ff.], if we have 'in our pocket', so to speak, this kind 
of oracular guarantee, namely a transitive partition S which induces a particular colored 
board, then we can imitate S by means of a 'small' partition S', with rank 

rk (S')5;c(|S|), 

where c is a specific computable function, namely c(n) = \^~\ • m + 5 • 2^™+'" + 3 with 
m = [log2(H + 1)1 • Instead of being obtained directly from S, this S' is obtained through 
a process which 'mimics' a greedy colored process (S^)^^^ corresponding to S as 

stated in the trace theorem, and by then putting T,' = T,'^. Here £ < '}^q; moreover one can 
manage that the sequence of edge-activation moves and grand moves are 'synchronized' — 
in a sense to be clarified below — between the two processes. In what follows, we will refer 
to and to , respectively, when speaking of the original process and of the 

shadow process. 

Under one major respect, however, the way in which the small partition E' portrays S 
is unfaithful to the original: all of its blocks have in fact finite cardinality, regardless of 
the cardinality of corresponding blocks in the original partition. To find a remedy to this, 
we will first detect the causes which can make a block in S infinite: such causes are to 
some extent static, viz. features of the S-board, and to some other extent dynamic, viz. 
'pumping' events which activate certain special paths of the S-board during the original 
process. On the basis of a careful analysis of how infinity can enter into play in the original 
process, we will discover how to infinitely expand, again, the green blocks of our small 
partition, taking advantage of two facts: 

• the board of the original and of the shadow process is the same; and 

• we can synchronize with each pumping event ly of the original process a regular chain 
of actions that can safely be interpolated next to the move of the shadow process 
corresponding to the original i^-th move. ('Safely' means that the imitation, in the 
sense of Def. [T71 below, is not disrupted by the extra moves.) 

3.3.1 Pumping paths 

The block at a place s cannot become infinite, during a formative process, without 
some afferent edge carrying to s infinitely many elements drawn from a cycle. Other- 
wise stated, to make it possible that |s^*^| ^ ^^Oi the board of the process must have a 
path Co,qo,Ci,qi, ... ,Cn,qn,Co,to,Di,ti, ... ,Dm+i,tm+i ending with t^+i = s. This 
fact should be easy to grasp, but we will nevertheless provide a proof of it soon. Notice 
that we can insist w.l.o.g. that, besides the double occurrence of Co, the only possible 
repetitions of vertices are qq = to and qq = to, Ci = Di. These considerations lead to 
the following two definitions, of which the former is preparatory to the subsequent, very 
important Def. [H 

Definition 4 In a "P-board Q, a path is an ordered vertex list Wi, . . . , Wk within which 
places and nodes so alternate that Wi, VFj+i is an edge of ^ for i = 1, . . . , A; — 1. A path is 
said to be simple if no place or node occurs twice in it (i.e., Wi Wj when < i < j ^ k 
and i = j {mod 2)). 
If 

V = qo,Ci,...,qn, Cn+i and 
with n, m ^ 0, are simple paths in Q which meet the following conditions, 
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Figure 1: The three kinds of pumping path 

• (C„+i,to) is an edge of Q, 

• {qo, . . . , g„} n {to, ■ ■ ■ , tm} Q {qo} n {to}, 

. {Cl,..., Cn+l} n{Di,..., D^+i} c {Cl} n {Di}, 

• if Cl = L*!, then qo = to, 

then V" is said to be CONTIGUOUS to V. 

A path Wl,...,W^ in G is said to be adjacent to another path Wi, . . . ,Wk in Q if 
VFfc, is an edge of ^. □ 

Definition 5 In a colored P-board G = {T,T, Q), consider paths 

C = Co, go, Cl, . . . , gri, Cn+l and 

^ = Q'n+l, C„+2, ?n+2, ■ ■ ■ , Cn+m+l, ^n+m+l 

(where n,m ^ 0), devoid of red places and such that C„+i = Cq and T) is contiguous 
to the path go, Ci, . . . , C„+i. (Hence, in particular, qn+m+i e T{Cn+m.+i) and 
qi e T{Ci) n Ci+i \ J" for i = 0, 1, . . . , n + m.) 

Then C is said to be a pumping cycle, and the path resulting from the concatenation 
of V at the end of C is said to be a pumping path. (cf. Figure{^) □ 

In what follows, we will set up the ground for a theorem generalizing the following easy 
proposition (whose proof we delay until we can generalize the statement): 
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Lemma 2 Relative to a colored V-process (S^)^^^, i 
that \s^*^ ^ Kq- Then s lies on a pumping path. 



, T, T, Q, consider a place s such 



In sight of a proposition generalizing this one, which will follow from two other lemmas, 
we give the following definition: 

Definition 6 For any node B and place t of a colored process. 



leastlnf(5) 
leastlnf(t) 



the least ordinal fj. for which ^ Hq, if |U-B^*^| > , 

^"-^ I otherwise; 
leastlnf({t}). 



Note that leastlnf(i?) ^ and leastlnf(f) ^ imply respectively B and t to he green, else 
the ending partition would not comply with the color of the hoard. Note also that 



leastlnf(t) 



the least ordinal /i for which \t^'^'^ \ ^ Hq, if \'t^''' \ ^ 
otherwise. 



□ 



Here are the two lemmas preliminary to ThmlJl which will generalize Lemma [2 

Lemma 3 Relative to a greedy colored V-process (S^)^^^, {•),T Q whose sequence of 
moves is [A^)^^^, consider a place sq such that leastlnf(so) = y + 1 for some ordinal v. 
Then there exist a place Sk+i and a green path T> = s^+i, Bk, Sk, ■ ■ ■ , Bi, si, Bq, sq from 
Sk+i to sq, with k ^ 0, such that 

(a) leastinf (sjt+i) is a limit ordinal A; 

(h) leastinf (sj+i) ^ leastlnf(i?i) < leastinf (sj), for i = 0,1, . . . , k; 

(c) for every edge {Bi,Si) lying on T> and for every node H other than Bi, it holds that 



^(leastlnf(si)) ^ ^^(leastlnf{si)-l) 
^(leastlnf(si)) ^ rp* ^^^(leastlnf (si)-l) -j 



> Ho 

< Ho. 



and 



Proof. Arguing by contradiction, let us assume that vq is the least ordinal such that 
an So with leastlnf(so) = J^o + 1 exists violating the thesis. (Clearly sq must be green.) 



Then 



T^A 



1^0 , 



^ No, where A^q is the i^o-th move, and hence there is a green place 
si G A^Q such that < leastlnf(si) ^ leastlnf(A,y(j) ^ z^o- It can easily be checked that 
the edge (A^g,so) satisfies condition (c). Thus, if leastlnf(si) were a limit ordinal, our 
initial assumption would be violated, because we could take A; = and V = si, A^^, sq. 
Hence leastlnf(si) = 7 + 1, and therefore, by the assumed minimality of uq, a green path 
T>' leading to si and satisfying the conditions of the lemma can be found. But then, 
prolonging D' first with and next with sq would give us a D whose existence conflicts 
with our initial assumption. ■ 



Lemma 4 Consider a greedy process over a V -hoard Q, and let X be a limit ordinal. Let, 
moreover, the subgraph Q\ of Q consist of all 
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• places q such that the set 

is cofinal in X (i.e., IJIx^g = X); 

• nodes B such that the set 

If = {u<X\A^ = B] 

is cofinal in X; 

• edges {B, q) such that 

is cofinal in X; 

• edges {q, B) such that q (z B. 

Then every vertex W of Qx (if any exists) has at least one predecessor in Q^. 

Proof. If is a place p of Qx then, since 

h,p = \J{it ■■B<zr}, 

from the assumption |J Ix^p = X and the finiteness of V it follows that [J I^^ = = U -^a^ 
for some B: hence B is an immediate predecessor of p in 

On the other hand, if 14^ is a node B of Qx then, from the assumption (J = A 
and from the greediness of the process it follows that UU{-^A,(j '• Q ^ B} = X. Therefore 
[Jlx,g = X for some q € B, in view of the finiteness of B, and hence q is an immediate 
predecessor oi B in Qx. ■ 

We can now combine the preceding two lemmas into the following important result: 

Theorem 2 (Pumping theorem) Relative to a greedy colored V-process 
(S^)^^^, (•), T, JF, Q whose sequence of moves is (A,^)^^^, consider a place s such 

that ^ b^o- Then s is the last node of a pumping path which can be split into adjacent 
paths CjT)',!)" such that 

1. C is a cycle; 

2. the path C,T>' ends with a place g whose leastlnf(5f) is a limit ordinal X; 

3. < leastlnf(g) < A = U^fq f^olds, where if^ =Drf {u < X \ = B A / 
q^'^^}, for every edge {B,q) lying on C,V' ; 

4- X ^ leastlnf(i?) < leastlnf(g), for every edge {B,q) lying on V" ; 

5. leastlnf(g) ^ leastinf (i?), for every edge {q,B) lying on V" ; 

6. for every edge {D,p) lying on T>" and for every node H other than D, it holds that 

jp(leastlnf(p)) p-p*(^(leastlnf{p)-l))j ^ 
jp(leastlnf{p)) pi rp*^^(leastlnf(p)-l)-jj ^ _ 

Proof. If leastlnf(s) is a limit ordinal, then we can take A = leastlnf(s), g = s, and T>" 
void. To construct C,T>', we can exploit Lemma HI where Qx turns out to be non-void 
since it contains s. Thanks to the fact that every vertex of Qx has a predecessor in Qx, 
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starting with s and proceeding in a backward fashion we will sooner or later hit the same 
vertex twice, since Qx is finite. 

If leastlnf(s) is a successor ordinal, then by Lemma [3] there exists a green path 

V" = Sk+i,Bk,Sk, . . . ,Bi,si,Bo,so, with sq = s, 

such that 

• leastinf is a limit ordinal A; 

• leastlnf(sj+i) ^ leastlnf(i?j) < leastlnf(sj), for i = 0, 1, . . . , fc; 

• for every edge {Bi, Si) lying on D" and for every node H other than Bi, it holds that 



^(leastlnf(si)) ^ ^j^{\e3st\nf{si)~l)-, 
^(leastlnf{si)) ^ rp* ^^^(leastlnf (s,)-l) ' 



> and 



Let us put (7=DefSfc+i. To construct the paths C^V\V" of the theorem, we argue as 
follows. Much as in the previous case, we use again Lemma [5] to construct a pumping 
path C, T>' leading to s^+i- Starting in Q\ with s^+i, we proceed backwards until either we 
hit the same vertex twice, or we hit the vertex Bk, provided that Bk is in Q\. In the latter 
case, we form a cycle by making a further backward step through the edge {sk+i,Bk). 
Finally, we put V" =^^i Bk, Sk, ■ ■ ■ , Bi, si, Bq, sq. 

It is an easy matter to verify that the paths C^V^T)" satisfy the conditions of the 
theorem. ■ 

3.3.2 Grand events and local trash 

In what follows, we will refine into a useful proposition the following easy remark: the 
block at a place s belonging to a J-node A cannot become infinite during a colored process 
unless A has a green place among its targets. To see this, assume that s G A € Q and 
|s(')| ^ Hq. Consequently, > and C and hence there must 

be a place g such that n g^'^j > Kq, because \V^*'> \ = \V\ < No; which obviously 

implies that g € T{A) \ T . 

In sight of generalizing the above remark, recalling the notion of grand move and 
noticing that such an event occurs, in a colored process, at most once for each node A^ we 
give the following definition of grand event GE(^) associated with A: 

Definition 7 For every node A and every such that ^ u < 

GE(A) - / ordinal u for which U A^*^ G U \ \J V^''\ if any exists, 

\ the length ^ of the process otherwise. 

Moreover, for any given collection A of nodes, we put 

GE(^) =Drf min{GE(A) : A (£ A} . 

□ 



17 



Notice that this definition imphes that for any node A and any v such that ^ i' < ^, 

z/ = GE(A) ^ [jA^'') e\JV^''+^'>\]JV^''\ 

u>GE{A) ^ U^^'^ e U^^''^- 
Other elementary properties, whose proofs are left to the reader, are stated in the 
following lemma. 

Lemma 5 Let (S^)^^^, (•), T, JF, Q be a greedy colored V-process and let A C V be a 
node. Then 

(a) = ^(•), where a = GE{A); 

(b) if q^'^^^^ 2 Q^'^\ for some q & A and some v < then GE(j4) > v. 

Proof. Straightforward. ■ 

The following definitions show properties which allow one to "drain off" the "residual" 
elements of a pumping process: 

Definition 8 A place g is said to be a LOCAL TRASH for a node A and a colored P-process 
({gMW)^^^,(.),r,.F,Qif 

• g £ T^iA) \ !F, i.e., g is a green target of A; 

• every node B such that 5 G S has GE{B) > GE{A). □ 

Lemma 6 Relative to a greedy colored V-process (S^)^^^^, (•),T, JF, Q, consider a node 

ACT such thatlJA^*'^ is infinite and a = GE{A) < ^. Then the set y*(yl(")) \ jJ'P*^"^ is 
infinite. 

Proof. Let (A^,)^^^ be the sequence of moves of the given 7^-process and let 

UA=^^,\jA(-)\\jA('^o)^ 

where vq =ue{ minji^ ^ a : A^ = A}. If ua is finite then, since is finite and (J yl^") = 
IJ^(') is infinite, the set {v G : ua v} is an infinite subset of 7*{A^"^) disjoint 

from U7^^"^ and therefore \\JV^°'^ is infinite. 

On the other hand, if ua is infinite, then the set {|J A^"^ \ {w} : w (z ua} is an infinite 
subset of Since |{U \{w} -.w € ua} n IJ | ^ 1, we again conclude that 

\ y 7?(") is infinite. ■ 

Lemma 7 Relative to a greedy colored V-process (E^)^^^, (•),T,JF, Q, consider a node 
A (1 V such that [j A^'^ is infinite. Then A has a local trash p such that p^*^ is infinite. 

Proof. Let a = GE{A). Since ^ is a node, we have = T{A'^''>) C U^^'^ 

hence \ U^^°^ ^ \JV^"'+^\ by the greediness of the process. Moreover, since 

rp*|-^(a)-j y jj •p(«) ig g^]^ infinite set by LemmalU there must be a place p € T{A) for which 
the set n \ U^^"^) is infinite too. Hence p(') is infinite, and therefore 

p^T. 

Moreover, since \ / 0, it readily follows that GE{B) > a = GE{A) must 

hold for every node B (^V such that p (z B, whch proves that p is a local trash for A. ■ 

Given a path 2? in a P-board Q, we denote by (P)p/aces and {T>)nodes the collections 
of places and of nodes occurring in V, respectively. Moreover, given a node B in Q, we 
denote by N'{B) the collection of all nodes which have nonnull intersection with B. 
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Definition 9 Let C, P be a pumping path relative to a given colored P-process 
(S^)^^^, [•], T, T ^ Q, with I finite. Then ((C, ^i) • • • > 1-'n),i^, Qo^ ^ ) is called a pumping 
chain if 

• VqjVi, . . . jPjv is a partition of P into contiguous paths each ending with a place, 
where in particular 

• Pat ends with the place a; 

• m = mo, mi, . . . , m^v is a non-decreasing sequence mo ^ mi < m2 < . . . < mjv < ^ 
of ordinals; and 

• putting Vq =]3^fC,2?o, we have: 

(i) qo G {C)piaces and \ U U 'P^"'°^ + 0; 

(ii) GE(AA((A)p/aces)) ^ mi, for i = 0, 1, . . . , A^; 

(iii) / (i.e., ^ for B G (A)node. and i = 0, 1, . . . , iV. □ 

Remark 2 For a wholesale re-use of all notation concerning formative processes, we des- 
ignate the entities associated with the shadow process as i^W, AW(g), etc.). 

Related to a weak "shadow" formative process w = ({gt*]}qg-p)j^£, we use the collection 
of "salient" steps {/iiji^^ of the original process, as defined in [CQU021 Def. 7.1]. 

Definition 10 A set W of places is said to be closed for a colored T-'-process 
({gM},ep)^^^,(.),T,.F,Qif 

• all of its elements are green; 

• every IP-node which intersects W has a local trash belonging to W. 

If C is a path in a "P-board, we define a collection of places to be a CLOSURE of C 
when B is closed and it contains {C)piaces- A path C is said to be CLOSURE equipped 
whenever it owns a closure. □ 

Remark 3 Observe that the following function i i-^ //j is an order isomorphism between 
the following structures (£, <) and <). This fact has valuable consequences: 

(i) For every node /^q^^^) = GE(i?); 

(ii) 5 is a local trash for A if and only if 5 is a local trash for A; 

(iii) C is closure equipped if and only if C is closure equipped. 
Remark 4 The following properties are easily verified. 

• If y*(B(^j)) / then y*(i?[j]) / 0. 

The following is the key result of the present section. Roughly speaking, it shows that 
the "shadow" formative process w = ({gt*l}ggp),^£ discovered in |COU02j preserves the 
pumping chains. 
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Lemma 8 IfV with greedy formative process w = ({g(")}qg-p)a^^ has an infinite place 
p^*\ then V , with weak "shadow" formative process w = ({gt*l}qg-p)j^£ and with salient 
steps {/Uj}j^£, owns a pumping chain at p which is closure equipped. 

Proof. By Thmj2l p lies on a pumping path which can be spUt into paths C, T>' , T>" such 
that 

1. C is a cycle; 

2. the path CjV ends with a place g whose leastlnf(5') is a hmit ordinal A; 

3. < leastlnf(g) ^ A = U a holds, where 

I^,x =Def ^<AM, = SAg('^+i)/g(-)}, 

for every edge {B,q) lying on C,!)'; 

4. A ^ leastlnf(i?) < leastlnf(q), for every edge {B,q) lying on V"; 

5. leastlnf(g) ^ leastinf (S), for every edge {q,B) lying on V". 

We will show that C,!)' , D" is actually a pumping chain relative to the shadow formative 
process w. 
Let 

A =D,f min{i \ ^ ^ X} . 

Then we define 

mo =Dcf T^SiX {l ^ i ^ A I {A^^_j^, q) lies on C and g^*^ \ ^ for some place q }. 

Notice that the definition of ttiq is well-given, i.e., 

I 1 < i ^ A, {A^^_„q) lies on C and q^^ \ g^^-^l ^ for some place g } 7^ 0. 

Indeed, let q S {C)piaces and let B be the predecessor of q in C. Let G Sal be such that 
B = Af,^^, q^i'n) n y*(S(^^o)) = 0, and gK+i) n T*{B^^'^o)) / 0. Since 1^^ ^ 0, we have 

< A ^ /x^, so that 1 ^ Jo + 1 ^ A. Therefore, 

jo + 1 € {z I 1 ^ i ^ A, {A^-_-^ , q) lies on C and g'*' \ g^^^"*^^ 7^ for some place q } . 

Next we define Po to be the longest initial subpath of D' , D" which contains only nodes 
occurring in (C) nodes- _ 

Assuming that we have already defined the paths VqjVi, . . . jVk, each ending with a 
place, and the integers mo ^ mi < . . . < m^, for some A; ^ 0, we define I'fc+i and m^+i 
as follows, provided that V' ,7)" ^ Poj^ii • • • j^fc- Let -D^+i be the first node in V' ,7)" 
not occurring in Poi^ii • • • i^fc- We define ruk+i as the least integer j ^ mt such that 
'y*{B)^k+i) 7^ ^- Moreover, we define X'fc+i as the longest subpath £ of V ,1)" starting at 
Dfc+i, ending at a place, and such that ^ 0^ for each D G (f)no(ies- 

Since V ,T>" is finite, the above definitional process must terminate and produce a 
finite sequence mo ^ mi < . . . < of natural numbers and a partition Po) T^i-, ■ ■ ■ ■, T^N 
of D', 2?" into contiguous paths each ending with a place and such that Vi starts with the 
first node in V\V" not occurring in C. Finally, we put Vq =ngfC,X'o- 

To show that C,T>\T>" is a pumping chain for the shadow process, it is now enough 
to verify that conditions (i), (ii), and (iii) of Def. [9] are satisfied, relative to the above 
partition of C, P', T>" and to the sequence of natural numbers mo ^ mi < . . . < tum- 
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Concerning condition (i), it is enough to observe that by the very definition of mo we 
must have gl"^"] \ ^[mo-i] ^ 0^ fg^. ggj^e q G (C)j,toce., so that \ (j Ijpl'""] 7^ follows 
immediately. 

The proof that condition (ii) of Def. [9] is satisfied can be simplified by the following 
properties(l-6), whose proofs are straightforward and are therefore omitted. 

Property 1 Let q e V and let B such that qe B. Then GE{B) ^ leastlnf(g). 

Property 2 Let q £ (T>")piaces- Then 

(a) leastlnf((7) > A; 

(b) for each node D G {T>")nodes which precedes q inT)", we have leastlnf((7) > leastinf (D). 
Proof. The property follows immediately from conditions 4 and 5 of ThmO ■ 

Property 3 Let i € {1, . . . , N} and assume also that rrii-i < mi. If Di is the initial node 
ofVi, then 

mm{fl < C I rpf'^^) 0} = + 1. 

Property 4 Let D e {C,'D')nodes- Then 

mm{n < C I r(Z)(^)) / 0} < A. 

Property 5 Let q € iC,'D')piaces o,f^d let B Q V be a node such that q £ B. Then 
GE(A) ^ A. 

Property 6 Let i G {0, 1, . . . , A}. Then /ij < A. 

To show that condition (ii) of Def. [9] holds, it is enough to prove that for every index 
i € {0, 1, . . . , A^}, place q G {T>i)piaces, and node B C. V such that q € B, we have 
GE{B) ^ rui. 

In view of Properties HHSl this can be done by distinguishing the following cases: 

I: 1 ^ i iV, mi> m^.i, q G (P")pZaces, and A G {'T>")nodes] 
II: 1 < i ^ iV, mi> q G {T>")piaces, and A G i'T>')nodes; 

III: 1 ^ N, mi> and q G {T)')piaces; 

IV: i = 1 and mi = ttiq; 
V: i = 0. 

For instance, assume that conditions of case I hold. Then we have 

/^GE(B) = GE(i?) (by Remark Hi)) 

^ leastlnf(g) (by Property [T]) 

> leastlnf(A) (by Property EJb)) 

^ min{^i < e I T{dI^'^) / 0} (by the very definition of the leastinf of a node) 

= jJ-nu-i + 'i- (by Property [3]) 

> fJ'nH-l 
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Therefore GE{B) > - 1, i.e., GE{B) ^ rm. 

The remaining cases can be proved similarly, by suitably exploiting Properties [THSl 

Concerning condition (iii) of Def. [H let i? G {C) nodes and let g G P be the place such that 
the edge (S, q) occurs in C. Let 7Z< ^ be the ordinal such that B = A-p, q^'P'^ n'?*{B^'t^^) = 
and q('P+^^ D / 0. Then, since I^^ / 0, we have /!< A. Moreover, since /I G Sal, 

we must have Ji = fij^, for some jo G {0, 1, . . . - 1} such that q^^°^ n = and 

q{io+i] PI y*(_B[io]) 0_ Since ^ij^ =J1< \ ^ n^, we have jo + 1 ^ A and therefore jo < mo- 
In particular, since TiB^f'n)) / 0, it follows that T*(fi['"o]) d y*(B[io]) ^ 0^ and therefore 

Since ^ holds by construction, for B G {Vj)nodes and j = l,...,N, it 

follows that condition (iii) of Def. [9] is met. 

Finally, by Remark [S^iii) , we can assert that w = ({gt*l}gg-p)j^f , with salient steps 
has a closure equipped pumping chain at p. ■ 



4 A finite representation of an infinite model 

In this section we show how a finite transitive partition with a related formative process 
can be seen as a finite representation of an infinite model. 

Consider a transitive partition related to a model for a formula of MLSSP. Assume 
that a formative process of such a transitive partition is equipped with a pumping chain. 

Our goal consists in iterating the sequence of the pumping chain trying to preserve, 
roughly speaking, the satisfiability of the formula. In this way we make the resulting 
model invariant under expansion of the formative process, which, from a semantic point 
of view, means that some places can be increased without affecting the capability of the 
resulting transitive partition to model the formula. 

Now let $ be the previous formula enriched with new literals of the following type: 
-^Finite{x). Provided that at least one place for each variable x lies in the pumping 
chain, <I> is automatically satisfied by the transitive process which results from an infinite 
prolongation of the formative process obtained by repeating infinitely many times the 
pumping chain. 

This in turn implies that the formative process with the pumping chain together with 
the model of <I>~ can be seen as a finite representation of an infinite model of 
The following definitions serve the above strategy. 

Definition 11 When <^ is a formula of MLSSPF, we denote by <I>~ the formula which 
results from $ by withdrawal of all literals of the form -^Finite{x). □ 

Definition 12 When $ is a formula of MLSSPF, we name A COLLECTION OF infinite 
FOR <I> any subcollection F of T^Xi^, which satisfies the following requirement: for any infinite 
clause -^Finite{x) in $ there exists a a G F n 9(a;). □ 

These definitions enable us to summarize the content of the preceding sections into the 
following necessary condition for satisfiability of an MLSSPF- formula. 

Theorem 3 Let ^ be a satisfiable formula of MLSSPF. Then there exist a model M G 
{ sets j"^* and a formative process for such that: 

• ^ ^ /(I'^'I'I); where f G is a specific computable function; 
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• the canonical board of M satisfies the following condition: 

There exists a "collection of infinite" T for $ such that to every cr € F there corre- 
sponds a pumping chain, closure equipped, at a. 

The main result of this section is to show that these conditions are sufficient, too. 
Remember that, in order to preserve the satisfiabihty of the MLSSP literals, we must 
guarantee satisfaction of the conditions 1-3 listed in Section 12.31 Hence our claim consists 
in detecting which structural properties two formative processes have to share in order to 
produce transitive partitions which model the same MLSSP literals. Then we can verify 
those properties with the original process and the process obtained from the previous one 
by repeating infinitely many times the sequence of the pumping chain. If these properties 
are not disrupted by prolongation of the formative process, we obtain automatically a 
transitive partition that simultaneously satisfies the MLSSP literals and makes the vari- 
ables involved in the pumping chain infinite through one or more of their places. Thus 
the infinite clauses -^Finite{x) of $ will be satisfied, because the prolongation can be 
performed for any pumping chain of the original formative process and the following holds 

"There exists a 'collection of infinite' T for $ such that to every cr G T there 
corresponds a pumping chain, closure equipped, at cr." 

In order to proceed with such approach, we need some technical tools which have been 
introduced in |Urs05j . For the reader's convenience, we report below the essential proofs 
and definitions. 

Definition 13 e G |J P^') is said to be unused at^u^^ife^lJU i-e., if e ^ z for 

any q € V and any z € q^^^ . 

We denote by unused{q) the collection of all unused elements of q. □ 

Definition 14 An e G \JV^'^ is said to be new at ^ ^ if e G A(^')(g) for some q eV. 

□ 

Obviously a new element is, in particular, unused. 
Lemma 9 If b is a set made of unused elements only, the same is true ofy*{{b} U A). 

We shall adopt the following notation. For a couple of ordinals /?', (3" we denote by 
iP',^"] the collection of ordinals {/? I ^ /3 ^ P"}. 

The following definitions are introduced to distinguish between the new sets used to 
imitate the old process and elements used to increase the cardinality of the places in the 
collection of infinity. 

We say that a transitive partition S is equipped with a Minus-Surplus partitioning if 
each block q is partitioned into two sets, namely, Surplus(g) and Minus((7). Consistently, 
we can extend this notation to a formative process (S^)^^^. Given a node F, we indicate 

by Minus(F('^^) the collection of sets 

{Minus(Q('')) U G F}. 

Define now a Minus-Surplus partitioning for Sq, and assume that for each step /i of the 
process a refinement of the partition {A^^\q)}q^Y. is carried out in the following way: for 
each g G S, the set A(/^)(g) is split into two sets A(/^)Minus(g) C (Minus (A^f^)) and 
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A('^)Surplus(g) C \ J'*(Minus(^}fO)- 

Then define inductively 

Surplus(g(^+^)) = Surplus(g('')) U A('')Surplus(g) 

and 

Minus(g(^+^)) = Minus(g(^)) U A(^)Minus(g). 

As for ^, put 

Minus(g(^)) = \J Minus(g(^)) 

and, analogously, 

Surplus(g(^)) = U Surplus(g(^)) 

If r is a subset of S, we denote by Surplus(r) the set 

{qen Surplus(^) / 0}. 

Definition 15 Whenever a Surplus-Minus partition is defined for all blocks of a transitive 
partition S, we say that S is equipped with a Minus-Surplus partitioning, and we 
denote by Surplus-Minus(S) the following refinement of the original partition: 

{Minus((7), Surplus(g) : q € S}. 

It is rather obvious that Surplus-Minus(S) Q'S. □ 

Remark 5 Easy combinatorial arguments (see |CQU02l Lemma 3.1 5(b)]) show that 
J'*(_) of Surplus and Minus nodes are mutually disjoint. 

Whenever you have to compare two formative processes, as in dynamical systems, you 
have to check initial conditions of the phenomenon and the way it evolves. In our cases 
the initial conditions are the two starting transitive partitions and the evolutions are the 
couple of formative processes that begin with the above transitive partitions. Therefore 
the conditions of similiarity are to be divided into two groups, the former on the initial 
conditions the latter on the evolutions. 

The following requirements are to be satisfied as initial conditions of a transitive par- 
tition in order to play the role of starting point of an imitation process (as is easily seen, 
they are merely combinatorial). 

Definition 16 Let ({g^^^}gg-p)^_^^ , (•), T, JF, Q be a colored P-process, (S,^) be a S- 

board equipped with a Minus-Surplus partitioning, q qhe a bijection from V to V, and 
C be a closed collection of green blocks. Assume k' < ^, such that (i), (vii), (viii) and (x) 
of Def. dZlhold in the version = S. We say that S weakly imitates S upwards, 

provided that the following conditions are satisfied: 

(a) for all r C S and € S, 



|jMinus(f ) G r(Minus(f)) \ |J iff [JT^'''^ G r(r(^'')) \ [j q^^'^- 
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(b) g G r A Surplus(g) / A GE(r) ^ k' implies U T € y*(r) \ Uggs 

(c) if GE(r) < k', then [J r('^"') G g^'^') iff [J ? G g and T G Q implies y*(r) C y S. □ 

The following are instead the properties that guarantee that the processes are similar 
enough in order to produce transitive partitions that model the same MLSSP literals. 

Definition 17 Let , {•),T,T, Q be a colored V -process. Besides, let 

{{Q^°'^}q(z-p) ae[a' a"] ^ simple formative processes equipped with a Minus-Surplus par- 
titioning. Assume that g i— > g is a bijection from V to V, P" ^ ^, and 7 is an order 
preserving injection from [(3',P"] to [a', a"]. Let C be a closed collection of green blocks, 
and q qhe a bijection from V to V. We say that ({?'"^}gg-p)Q,g^[[^/ ^//]] imitates the 
segment of the process if the following hold for all /3 in [P' , P"]: 



(i 

(ii 
(iii 

(iv 

(v 
(vi 
(vii 
(viii 
(ix 

(x 



= |Minus[^(^)](g)|; 
|A(^)(g)| = \AMmMmus{q)\; 

A[')'(/5)]Surplus(g) ^ implies p = GE(^^), q local trash for Ap and q e C; 

If r G Q holds, then y*(f [^(GE(r))]) c J s[^(GE(r)+i)] . 

For all ;3 / GE(r) Ijr^'^) G A^^\q) iff U Minusf 1^(^)1 G A[T(^W(g); 

If /3 = GE(r) then Ur(^) G A(^)(g) iff UrW^)l G AW^)l(g); 

For all g G .7^ gt^^^^^ = Minus ['^^^^l (g); 

For all ordinals /?{(/: ^G Surplus(S)['^'^^^l} C C; 

|r(Minus(rW^)]))\U,eE'?[^(')]| = |y*(r)('=)\U,eE'?^'^l; 
|y*(Minus(f[T('=-i)])) n = |y*(r(*^-i)) n 



□ 



Remark 6 We make some simple remarks. 

• 5'*(r(''-i))ng('') = T*(r(''))ng(*^). Hence, whenever j{k) is the successor of 'y{k — 1), 
(x) can be rephrased as 

|r(Minus(f[-^(*^)i)) ng['^(*^)i| = |r(r('=)) ng(^)|. 



• Naturally, (ix) belongs to the structural properties that a formative process has to 
fulfill in order to simulate another one, although it can be obtained from (i) and (x). 

• Assume that (viii) holds at the beginning of the process. Then (iii) entails (viii); 
therefore, in order to prove inductively the previous properties, it suffices to show 
that (viii) holds at the outset. The same argument holds for (x), which can be 
obtained from (ii), (iii) and (x) of the preceding step. 
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In a sense the initial conditions are very strong requests: in fact, whenever they are 
satisfied we can imitate any formative process that has one of them as starting point, as 
the following lemma shows. 

Lemma 10 Let ({g^^^jgg-p)^^^ , (•), T, .F, Q be a colored V-process, (S,^) he a Y^-board 

whose S is equipped with a Minus- Surplus partitioning, q ^ q be a bijection from V to 
V , and C be a closed collection of green blocks. Assume that k' ^ and that S weakly 
imitates S^/ upwards. Define S = S^^^/) and, for all q ^ V , q = (f"'^^ . Then for all 
ordinals k" such that k" ^ ^ and \[k',k"]\ < uj, one can construct a formative process 

imitating the segment [k',k"] 0/ ({g(^')}gep)^^^ , (•), T, J^, Q. 

Proof. We construct a formative process satisfying the conditions (i)-(x) by induction. 

Concerning the base case /.i = 'y{k'), (i), (vii), (viii), (x) hold by hypothesis, and (ix) 
holds by Remark [6l since (i) and (x) hold. Assume k' ^ GE(Afc/); then, using (ix) and 
hypothesis (a), we can define a partition U(jgs(^'''^^'^'''^ (9) °^ 

r(Minus[^('=')l(:4^)) \ IJ 

such that (ii) and (v) hold, as well. If k' = GE(ylfc/) and Surplus(gf'^^'^'''l) 7^ for some 
q G Ak' (otherwise we proceed as before, and condition (vi) is automatically satisfied), 

then, using (b), interchanging |J Minus (^^/^'^^ ^') with (J ^l'''^'^')] , (vi) is satisfied. 

If Ak' G Q and Aj^' = Minus(Afc'), proceed as before (in this case (iv) holds by a 
straight checking of cardinality starting from (ix)). Otherwise, since (viii) holds, there 
must exist a local trash q for A^^i. Then, construct the partition as before, except for 
^[7(fc')]g^rpiug(g)^ in which we put the whole remainder 

{TiX^^^'h \ U ^l^^'^')]) \ U AW^')lMinus(g), 

SO satisfying (iii) and (iv). 

Now, assume all the inductive hypotheses for ^{k). Our aim is to demonstrate the case 
7(fc + 1). By Remark [6l provided that (iii)[7(/c + 1)] is proven, (viii) automatically holds. 
Plainly (i)[7(A:)] and (ii)[7(A;)] entail (x)[7(A; + 1)] and (i)[7(A; + 1)]. The latter in its turn 
implies the following for all F C S: 

|r(Minus[^(^'+^)if))| = |r(r('=+^))|. (3) 

In order to show (ix) we observe that, since 
r(Minus(f[^('^+i)l)\ J 

= (r (Minus(r[^(^+i)i) \ r (Minus(r[^('=)i)) \ y glT('=+i)]) u 

-?ge 

u(r(Minus(r[^(*^)i)) \ IJ g[^('=+^)]), 

<3GE 

it follows that 

r(Minus(f[^('=+i)l)) \r(Minus(r[^W])) \ J qhik+i)] 
= r (Minus(f [T(*^+i)l)) \ r (Minus(r[^('=)])). 



26 



Therefore, 

r(Minus(fW^+i)l))\ IJgt^^'^+^W 

= r (Mmus(f W'^+i)!)) \ r (Mmus(fW*^)l)) U (Mmus(f l^^'^)])) \ [j qM'^+'^^l 

qeT, 

Reasoning in the same way, we obtain 

r(r)(^^+i)\ IJ gC^+i) 

By the induction hypothesis (i)[7(/c)] we have |a'*(Minus['^('^')lf))| = |y*(r('=))| and, by 
equation 

|r(Minus[^(^'+^)ir))| = |r(r('=+^))|, 

which in its turn imphes 

|T*(Minus(f [^('=+1)])) \ r(Minus(f[^('=)]))| = |r(r)('=+^) \ ^^(r)^^)!. 

Hence we are left to prove the equality 

|r(Minus(r[^(^')i)) \ U giTC^+i)]! = |r(r)('=) \ |J gC^+^^i. (4) 

Observe that 

y*(Minus(f[^(^')l)) \ IJ gl^C^+i)] = T*(Minus(f \ \J \ |J A[^('=)lMinus(g). 

If r 7^ Af^, by the disjointness of 7* we get 

r(Minus(r[^('=)])) \ U gt^^'^)! \ IJ A[^(^)lMinus(g) = ?*(Minus(r[^('=)])) \ |J q^^'-'^^l 

(JGS gGS gGE 

Plainly, the same is true in the version, thus (|4]) holds for 7(fc), by virtue of (ix). 
Otherwise, since Uggs^'^^''^^Minus(g) is a partition of a subset extract from 

?*(Minus(f[TW]))\ J 

we have that 

?*(Minus(f \ IJ gl^^'^)] \ J A[^('=WMinus(g) 



?*(Minus(r[^('=)])) \ J gt^^'^)!! - |A[^('=MMinus(g) 



Again, the same holds in the version, and @ is reached by (i)[7(A;)] and (ii)[7(A;)]. This 
concludes the proof of {ix)[y{k + 1)]. 
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Concerning (vii)[7(/c + 1)], observe that = qM'')] u A^'^'-'^^^q). By the mduction 

hypothesis (vii)[7(A;)], 

qbik)] =Minus(g[^('=)]). 
On the other side, since (iii)[7(A;)] holds and C is composed of green places only, 

^[7(fc)](g) = A[^WlMinus(g), 

which implies (vii)[7(A; + 1)]. 

Regarding (ii)[7(fc + l)]-(vi)[7(A; + 1)], the argument goes like in the base case. ■ 

The following theorem shows that our requests are well done, that means that they are 
sufficient for the role we are expected to play. Indeed, they produce transitive partitions 
that model the same MLSSP literals. 

Theorem 4 Let (({g('')}ggp)^^^ , (•), T, J^, Q) be a colored V -process. Moreover, let 
({5^"'}qg-p)Q,<^/ another formative process, equipped with a Minus-Surplus partitioning. 
Assume that, for some k' ^ ^ and m ^ ^' , 

• T^rn weakly imitates Tiy upwards; 

• the process ^tz^p) ^^iz^]j.i imitates (^{q^^^}q^'p) where 7 is an infective 
map from [k' to [m, ^']; 

• S^/ has the same targets as S^; 

• for all ji > m such that fi ^ 7[k',(,], the following holds: A^^\q) C A^^"^ Surplus{q) ; 

• if P is the largest ordinal such that (5 G 7[/f:',C] /\ (3 ^ fi, if q is a local trash of A^j,, 
and ifGE{Af,) > 7"^/?), then [j ^ A^^^ Surplus{q) . 

Consider an l\/lLSSPF-/ormu/a <I>, a set-valued assignment M. G {sets}"^* defined on the 
collection of variables in and assume that ({'7^^^}gGp)^<g , {•),T,T, Q is a colored 
V-process for the S^t'^^-board. 

Then, letting A4'{v) = IJ[^-m(^)] /^'^ every literal in the following conditions are 
fulfilled: 

• if the literal is satisfied by A4, then it is satisfied by A4' too; 

• if the literal is satisfied by Ai' , and does not involve J" or the construct {_,..., then 
it is satisfied by M too. 

The proof of Theorem H] can be found in |Urs05j but, for the sake of completeness, we 
review it in the Appendix. 

Now we are ready for the main result of this section. We show how a finite assignment 
can yield an infinite model, which satisfies the same MLSSP literals. To this end, we prove 
the following theorem, which generalizes a result given in |Urs05t Theorem 38]. 

Theorem 5 Let ^ be a formula of MLSSPF and M G {sets}"^* a model for together 
with a (({g(^)}qg-p)^_^^ , {•),T,J^, Q) colored V-process for such that: 

• Q = {T,!F, Q) colored S;v'^-board satisfies the following conditions: 

There exist a "collection of infinite" V for $ such that for all a ^ T there exist a 
pumping chain, closure equipped, at a. {{C,T>q,Vi, . . . ,'Dp^),m,qQ,a) with a closure 
C. 
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then there exists a model for <I> . 

Proof. Consider an occurrence of the literal -^Finite{x). 

Since F is a collection of infinite there exist a place a C M[x) and a pumping chain, 
((C, ■ ■ ■ , T^n),^, QOi f) with a closure C. 

Our goal consists in building from the original (({g^^'^lggp)^^^ , (•), T, Q) colored 

"P-process a new one {{(f^'^^^js) a<^' ™ such a way j\4{v) = [J{q ■ q € Ai{v)} is a model 
for 

We define, using a technique described in |CU97j . a sequence of nodes of lenght ^, 
denoting it A^. We shall use such a sequence as trace for a formative process with final 
transitive partition V satisfying the requested properties. The following sequence does to 
the purpose: 

C Vo C 

Ai . . . Amo-l Cq . . . Ct, Dp ■ ■ ■ D si~l,Ct+l ■ ■ ■ Ch , ^7(mo) • • • ^7(mi-l) 

ii.0— times 

■Di -Dm 

, s / s 

Dso=o ■ ■ ■ yl^j-f^j) . . . Aji^^^_i^ Ds^_-^ . . . Dg^ j4^(^j^-) . . . ^7(^) • 

Concerning nodes of the original sequence we use the capital letter A, concerning nodes 
of the cycle C we use the capital letter C, and concerning nodes of the simple path V 
attached to C we use the capital letter D. We denote by: 

• Ni, the nodes of the sequence Ai; 

• N2, the nodes of the pumping cycle {C,V); 

• ^7(1) , a node Ai in the pumped sequence; 

• an A'^2-node, where 7(i) is the index of the first A'"i-node before 

Finally, we usually refer to a piece of a formative process, bounded by the two indices 
a ^ /3, by "segment of the process". We refer to the segments composed of A^i and 
A''2 nodes in a different way, the former as "imitating segments" , the latter as "pumping 
segments" . 

In order to define a formative process we are needed only to exhibit the way to distribute 
all the elements produced at each stage. Our strategy consists in copying the old formative 
process until the stage tuq — 1 = 7(777-0 — 1), therefore along this segment we define 7 as 
the Identity map; then "pumping" the cycle to create new elements and distribute them. 
This procedure by transfinite induction increases the cardinality of the blocks inside the 
cycle. Unfortunately this distribution of elements could be not propagated along the path 
D in order to make a of infinite size. This phenomenon depends on the fact that some of 
the nodes involved could be not "ready" at the step when one of its block is infinite. This 
obliges us to wait for the first step when it is possible. As soon as these conditions are 
reached the "infinite can be propagated" until making a of infinite size. This procedure 
has in mind to preserve the cardinality of all blocks not involved in the pumping procedure. 
In order to do this we distinguish the elements reserved for pumping procedure from those 
used for mimicking the old process, creating a Surplus-Minus partition inside all the blocks 
involved in the pumping procedure, actually refining the original partition. 

Assume we have copied the original formative process until mo — 1. 
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We start with the stage 7(mo — 1) + 1. 
We trigger off our pumping procedure using the property (i) of the definition of pumping 
chain. Indeed, by (i) C has an qq block with a new element to. 

This element, tQ, will generate all the elements needed for increasing the size of all the 
blocks inside the cycle. 

[For the details of such a construction, cf. the proof of Theorem 38 in |Urs05] ]. 

From now on we denote by q places in C, by 6 places in ('Co)piaces5 by or a place which 
lies in the pumping path after the node F, hy a place which lies in the pumping path 
before the node F. Put Vq =^^fC,'DQ It is possible to prolongate the formative process by 
repeating the nodes in (C,X'o)nodes ^o-times in the following sequence: 

Co . . . Cf , Do • • • Ds^~i,Ct+i ■ ■ - Ch 
in such a way as to enforce that the following holds at step 7 (mo): 

(i) For all a G (Vo) places and F G {T>o) nodes, 
|y*({Surplus[T('"o)l(c7r)} U (F \ {a^}) D Surplust^'^'^^^lgrl > 

(ii) for all q, Minusl^^™""^)!? = MinusI^^™")]^ =c g^™") and 
\Unused{Mmus^^^"'°^^q)\ = \Unused{q)\; 

(iii) for all q, Snicplus{q) ^ implies q G Closure{{C,'D)); 

(iv) for all F in {C,V)nodes, [jF^^^^'^)^ i 7^[7(-o)]. 

It is straightforward to verify that the conditions requested in the LemmafTOlare respec- 
tively satisfied by the colored V-process (S^)^^^, (•), T, .7^, Q and the partition "p\-"/("^o)] 
for k = iTiQ. Therefore the segment [mo, mi — 1] can be imitated. 

Using the fact that partitions Surplus are never used along the segment [7(771,0), 7(mi — 
1)] and that it imitates the segment [mo, mi — 1], we can assert that for F in {T>)nodes 
y*(r)[7('»i)-i] _^ j^j^j |Surplus[i'('^i-^]5,J ^ w. This enables us to prolongate the process 
in such a way that an analogue of (i)-(iv) holds at the step 7(mi) (with 7(mi) in the 
segment Vi). Lemma [TOl applies again, and the process can be prolongated till 7(m2 — 1). 

In the same fashion the construction proceeds by application the same procedure to 
every section of the pumping chain, until the last node of the trace is reached. This 
plainly gives ^ uj. 

Now we are left to prove that the resulting transitive partition "PKI satisfies the thesis. 

To do this we invoke Theorem SI It is routine verifying that the hypotheses of Theorem 
m are met. Therefore we can assert that the model induced by the resulting transitive 
partition satisfies <I>~ plus all the literals -^Finite{x) such that in the original model 
M.{x) Da are satisfied. Indeed, the previous procedure has made a of infinite size. We 
are left to do the same for the other members of the collection of infinite. This is hardly 
ever a limitation since all pumping chains and closures are preserved and the formative 
process S can do the same role played by the original process before. Therefore, the same 
technique applies using a new pumping chain, till the end. 

Denote the last model M. and put X = {x I a r\Ai{x)}. 

M will satisfy the following formula 



= $ A /\ ^Finite{x) 
since F is a collection of infinite the thesis plainly follows. 
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Combining the results of the two sections, we achieve the main conclusion of this paper: 

Theorem 6 The language MLSSPF, namely MLSSP extended with a finiteness predicate, 
has a decidable satisfiability problem. 

5 Conclusions 

We have shown that the extension MLSSPF of the language MLSSP with a finiteness 
predicate has a decidable satisfiability problem, even though it does not enjoy the small 
model property, as is the case with MLSSP. Such result has been achieved by showing that 
MLSSPF enjoys a weaker form of the finite model property, called "small model witness 
property." Roughly speaking, the small model witness property for MLSSPF asserts that 
any satisfiable MLSSPF- formula has a model admitting a "small" representation through 
a suitably annotated formative process. 

We plan to further extend the techniques introduced in this paper to deal also with set- 
theoretic fragments involving besides the Boolean set operators and the singleton operator, 
also the unionset or the Cartesian product operators. Notice that in such fragments it is 
possible to express formulae admitting only infinite models. 
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Appendix 

A Proof of Theorem [4] 

The introduction of some additional tools makes the proof of the Theorem [5] more plain 
and fluent. We create various levels of similarity of transitive partitions and formative 
processes and break the proof in more steps. In the following we use conditions 1,2 and 
4, defined in Section 12.31 iii order to define a new class of similarity among transitive 
partitions. 

Definition 18 Let ^ be a colored transitive S-board. Then S is said to simulate (S, Q) 
UPWARDS, when there is a bijection /? G such that 

• S e-simulates S via /?. That is, [j /3[X] € [j /3[Y] if and only if e U^, for 
X,y C S; 

• S y-simulates S via /3. That is, [j /3[X] = TiU f3[Y]) if = J'(U^), for y G Q 
X,y C S; 

• S i?ed-simulates S via /?. That is, if o" € then = |cr|. 

□ 

The following lemma shows that the previous conditions are enough to model MLSSP 
clauses. 

Lemma 11 Consider a formula $ G MLSSPF, a set-valued assignment A4 G { sets j"^* 
defined on the collection of variables in together with the colored transitive T^x^- 
hoard Q = (T, JT, Q). Define $~ as the formula $ without literals of the type Finite{x) or 
—'Finite{x) . Moreover, let T, be a partition and P be a bijection between Tix^ and S such 
that T, simulates upwards via jS, and let Ai'{v) = IJ/5[^x(^)]- Then, for every 

literal in ^~ , the following conditions are fulfilled: 

• if the literal is satisfied by M., then it is satisfied by M.' too; 

• if the literal is satisfied by M.' , and does not involve 7 or the construct {_,..., _}, then 
it is satisfied by M. too; 

• if the literal Finite{x) appears in $ and is satisfied by A4, then it is satisfied by M.' 
too. 

Proof. The thesis can be recast as follows. For u,v,w and Wi in X^, the following 
conditions hold for all literals in 

(1) U "^{v) U iff U miv)] ^ U Pm^)], for in { = , G , C }; 

(2) U "^{v) = U * U iff U Pm^)] = U Pm^)] * U Pmw)], for * in { n , \ , U }, 
and U ^{v) = iff U Pi'^iv)] = 0; 

(3) if u "^{v) = nu ^iw)), then u pmv)] = nu pmw)])-, 

(4) if U "^(v) = { U ■ ■ ■ , U '^(^h) }, then 

u pmv)] = { u pmwi)], . . . , u pmwH)] h 

(5) \i Finite{v) appears in $ then ||J^(''^)! = IU/5[^(^)]I- 
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Property (l)g (here 3ft is meant to be g) follows from G-simulates in Def. [THJ (3) follows 
from the assumption Q{v) S Q and the notion of IP-simulates given in the same definition. 
Condition (5) plainly follows from definition of i^ed-simulates. 

We are left to prove that (4) hold. Observe that Q{v) C then consider Q{v) as the set 
X and Yi as the sets ^(wi). Hence we can assume that \JX = {\J Yi, . . . ,\JYl}, X C 
and Fi, . . . , are distinct. We must check that IJ (3[X] = {\J (3[Yi], ...,{J /3[Yl]}. Since S 
i?ed-simulates and X (^T, and |/?((t)| = |fT| for each cr € X, the desired conclusion 

easily follows. Indeed, by property (1) of Def. [HI |J /3[Yi] G P{a) if and only if |J S 
and . . . , (3[Yl] (and, accordingly, |J /3[yi], • • • , U are pairwise distinct. 

The proofs of remaining bi- implications go exactly as in |COU02( Lemma 10.1] ■ 

The next definition is a level of similarity of transitive partitions defined in a more 
combinatorial way; in the sequel we show how these definitions are interrelated. 

Definition 19 Consider a colored S-board Q = (T,J^,Q). A partition S is said to 
IMITATE (S, Q) when there is a bijection /3 G such that, for F C S, cr G S, 

(1) (3{a) n y*(/3[r]) / holds [if and] only if a n T*(r) ^ 0; 

(2) U /3[r] G (3{a) holds if and only if U T G a; 

(3) if r G Q holds, then 'P*{P[r]) C y S; 

(4) if a G holds, then \/]{a)\ < Hq. 

We will say that S imitates {T,,G) upwards when the following additional condition 
holds, for all (7 G S: 

(4') iiaeT, then |/3(cj)| = |cj|. □ 

Lemma 12 Consider a colored S-board G = (T, JF, Q) assume that a transitive partition 
T, imitates {T,,Q) upwards then it simulates (S,t/) upwards. 

Proof. Let S and S be transitive partitions, and let ^ be a colored V-board induced 
by S. Assume that S imitates (S,£/) upwards via the bijection f3 G (S)^. Finally, let 

Then we have: \J f3[X] G \J iff (3? G f3[Y]){[j P[X] G 5) iff (3 a G Y){[j(3[X] G 
P{a)) iff {3a £ Y){\JX e a) iff G U^- 

Assuming now that = ^(U^), Y ^ Q, let us prove that y(U/9[^]L^ 
Indeed, suppose t <Z [j P[Y\_ and let be the subset of S for which t G 5'*(5]t) (so that 
St C f3\Y], which implies G Q by the hereditarily closedness by inclusion of Q). As 
/3"MSf] C^l', it follows that T*(/3-i[Si])^C y{[jY) = [jX C U Therefore, by the 
fact that S imitates (S,^) upwards and T,t G Q, it follows that 'P*{Tit) C |JS, so that 
t G IJ S. Let at be the block in S to which t belongs, and let at be the block in S for 
which [3{at) = at- Then, since y*(T,t) n a* 7^ 0, we have that T*{(3-^[T,t]) n at / 0, which 
yields \JX = :P{[jY) ^ T{(3-^[^t]), [jX n at ^ ^, at e X, and hence t G a* G (3[X], 
which in turn yields t G |J (3[X]. 

Next, assuming again = ^(U'^)> let us prove that \J (3[X] C ?{\J(3[Y]). Indeed, 
for each t G U /^[^] there is a unique at £ X such that t G (i{at); moreover, by the 
transitivity of IJS, there is a unique PCS for which t G y*(/3[P]). Moreover, since 
y*(/?[P]) n I3{at) / 0, we also have that y*(P) n / 0. Thus we can take G at n ?*(P) 
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that, as at C \JX = TiiJY), fulfills t' G 'J'*{Z) for a suitable Z C Y. In conclusion, 
r = Z, and therefore t C (J p[T] = [j (i[Z] C [j /3[y]. 

■ 

As an immediate consequence, we have 

Corollary 1 Consider a formula $ S MLSSPF, a set-valued assignment € { sets j"^* 
defined on the collection 0/ variables in <I>, together with the colored transitive S;f^- 
6oard = (T, J^, Q) . Moreover, let S and (3 he a partition and a bijection, respectively, 
such that S imitates {T,,G) upwards via (3, and let A4'{v) = [J Pl'^Miv)], where is the 
function 9 S such that A4{v) = |J Q{v) holds for every v in X . Then, for every 

literal in and any literal of the form Finite{x) , the following conditions are fulfilled: 

• if the literal is satisfied by A4, then it is satisfied by M' too; 

• if the literal is satisfied by A4' , and does not involve T or the construct {_,..., _}, then 
it is satisfied by M too. ■ 



We are almost ready for the desired proof of Theorem [H One more lemma is needed 
showing that, provided that the initial conditions (relative to the starting transitive par- 
tition) are "similar" in the sense described above, the process which imitates the initial 
model satisfies the same MLSSP clauses. 

Lemma 13 Let ({g(''^}gg-p)^^^ , (•), T, Q be a colored V-process. Moreover, let 
({$'"^}gg-p)Q,<^/ ^6 another formative process, equipped with a Minus-Surplus partitioning. 
Assume that, for some k' ^ ^ and m ^ ^' , 

• weakly imitates S^/ upwards; 

• the process ({9^"^}ggp)og:^[fc/,g] imitates ({^^''''Igep)^/^^^^; where 7 is an injective 
map from [k',£] to [m, ^']; 

• S^/ has the same targets ofT,^; 

• for all fi > m A fi ^ iW,^,] the following holds: A[^l(g) C A^^^^ Surplus{q) ; 

• if P is the greatest ordinal such that [3 S 7[^','^] A (3 ^ ^, if q is a local trash of A^, 
and i/GE(A^) > -i~'^{l3), i/ien (J^ i A^^"^ Surplus{q) . 

Then S^/ imitates upwards. 

Proof. We prove that the resulting partition S^/ fulfills the conditions: 

(0) n y*(r)«) ^ holds if and only if gf«'] n T*(f K']) ^ 0; 

(1) U rl^'l e if and only if U r(«) e 

(2) if r G Q holds, then y*(f K'l) C (J^K'l; 



(3') if g G J^, then 



\qm 



Along the verification of properties (0)-(3') we refer to (i)-(x) of Def. [T71 
(0) By the fact that the two partitions have the same targets; 
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(1) In case |J T^^'^ G q^^'\ assuming that it is distributed strictly before m, then GE(r) < 
k'. Indeed, if not so, by (vi) Def. HZl since U T^^^^^^) G A(GE(r))(^)^ 

y f K'] g ^C] = y f [7(GE(r))] g ^[7(GE(r))]^^ 

which is impossible, due to the fact that IJ^^^'^ G q^^'^ is already in ^')'(*^E(r))] ^ ^^^^ 
^[7(GE(r))]- definition, is made of elements of y*(r[T(GE(r)]) ^ y^^^ ^[7(GE(r))] _ 

Then, using the fact that weakly simulates S^', the result follows. Concerning 
the right implication, we are left to prove the case when |J T^^ 1 is distributed after 
or in m. Let j be such an index. By hypothesis, j cannot be outside 7[A;',i^], and 
so j = ^{k) for some k. We show that k = GE(r). By contradiction, let us assume 
k > GE(r). Then, by (vi) Def. [HI 

y p[7(GE(r))] ^ ^[7(GE(r))]^^ 

Observe that, after 7(GE(r)), T cannot change inside the range of 7, on account of 
(ii) and (iii) of Def. [T71 It it cannot change for an index j outside, since GE(r) is 
greater than the greatest ordinal /? such that P G "flk' , ^] A/3 ^ j. On the other hand, 
k cannot be strictly less than GE(r), since in this case the same argument used for 
Ijrl^l distributed before m and GE(r) ^ k' applies. Therefore k = GE(r), and we 
are done. We now show the left implication in the case GE(r) < k' . The hypothesis 
implies that |J pI™] G gt™"!. Reasoning as before, we conclude that F cannot change 
along the process after m. Finally, assuming GE(F) ^ k', by Def. [TW vi) we have 

y f[7(GE(r))] g ^[7(GE(r))]^^ 

Again F cannot change in the sequel of the process, either along the imitated process, 
or outside. 

(2) Follows plainly from Def. I17( iv). Indeed, F G Q, therefore 

rp*(p[7{GE(r))]-) c y pWG!E(r))]_ 

As observed in the previous point, after [7(GE(F))], F cannot change either along 
the imitating process, by (ii) and Def. [TTlfiii). or outside, by hypothesis. Thus 

a5*(fK'l) c u^K']. 

(3') The red places cannot belong to C. Hence, by the property (viii), they cannot have 
Surplus part, which in turns implies that Minus(gt^]) = g^^l. This, combined with 
|Minus[T(^)](g)| = \q^^^\, by Def. [TT^i), yields the thesis. ■ 

By combining the results in Lemma [13] and Corollary [H Theorem [5] follows easily. 
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